Uninitialized Buffer Vulnerability in NVIDIA GPU Display Driver
CVE-2016-7386

5.5MEDIUM

Key Information:

Vendor

Nvidia
Status
Quadro, Nvs, And Geforce (all Versions)
Vendor
CVE Published:
8 November 2016

What is CVE-2016-7386?

The NVIDIA Windows GPU Display Driver prior to versions R342.00 and R375.63 is susceptible to a vulnerability in the kernel mode layer (nvlddmkm.sys) associated with the handling of DxgDdiEscape ID 0x70000D4. This flaw may enable the leaking of sensitive kernel memory contents to user space due to an uninitialized buffer. The exposure of this information can lead to potential exploitation and unauthorized access, posing a substantial risk to system integrity. Users are advised to update to the latest driver versions to mitigate this issue.

Affected Version(s)

Quadro, NVS, and GeForce (all ) Quadro, NVS, and GeForce (all versions)

References

https://support.lenovo.com/us/en/solutions/LEN-10822
x_refsource_CONFIRM
http://nvidia.custhelp.com/app/answers/detail/a_id/4247
x_refsource_CONFIRM
http://www.securityfocus.com/bid/93982
vdb-entryx_refsource_BID

CVSS V3.1

Score:
5.5
Severity:
MEDIUM
Confidentiality:
High
Integrity:
None
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.